forked from Minki/linux
0458e5428e
When 'tmpU1b' returns from r8712_read8(padapter, EE_9346CR) is 0, 'mac[6]' will not be initialized. BUG: KMSAN: uninit-value in r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541 r871xu_drv_init+0x2d54/0x3070 drivers/staging/rtl8712/usb_intf.c:541 usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396 really_probe+0x653/0x14b0 drivers/base/dd.c:596 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752 driver_probe_device drivers/base/dd.c:782 [inline] __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427 __device_attach+0x593/0x8e0 drivers/base/dd.c:970 device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017 bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487 device_add+0x1fff/0x26e0 drivers/base/core.c:3405 usb_set_configuration+0x37e9/0x3ed0 drivers/usb/core/message.c:2170 usb_generic_driver_probe+0x13c/0x300 drivers/usb/core/generic.c:238 usb_probe_device+0x309/0x570 drivers/usb/core/driver.c:293 really_probe+0x653/0x14b0 drivers/base/dd.c:596 __driver_probe_device+0x3e9/0x530 drivers/base/dd.c:752 driver_probe_device drivers/base/dd.c:782 [inline] __device_attach_driver+0x79f/0x1120 drivers/base/dd.c:899 bus_for_each_drv+0x2d6/0x3f0 drivers/base/bus.c:427 __device_attach+0x593/0x8e0 drivers/base/dd.c:970 device_initial_probe+0x4a/0x60 drivers/base/dd.c:1017 bus_probe_device+0x17b/0x3e0 drivers/base/bus.c:487 device_add+0x1fff/0x26e0 drivers/base/core.c:3405 usb_new_device+0x1b8e/0x2950 drivers/usb/core/hub.c:2566 hub_port_connect drivers/usb/core/hub.c:5358 [inline] hub_port_connect_change drivers/usb/core/hub.c:5502 [inline] port_event drivers/usb/core/hub.c:5660 [inline] hub_event+0x58e3/0x89e0 drivers/usb/core/hub.c:5742 process_one_work+0xdb6/0x1820 kernel/workqueue.c:2307 worker_thread+0x10b3/0x21e0 kernel/workqueue.c:2454 kthread+0x3c7/0x500 kernel/kthread.c:377 ret_from_fork+0x1f/0x30 Local variable mac created at: r871xu_drv_init+0x1771/0x3070 drivers/staging/rtl8712/usb_intf.c:394 usb_probe_interface+0xf19/0x1600 drivers/usb/core/driver.c:396 KMSAN: uninit-value in r871xu_drv_init https://syzkaller.appspot.com/bug?id=3cd92b1d85428b128503bfa7a250294c9ae00bd8 Reported-by: <syzbot+6f5ecd144854c0d8580b@syzkaller.appspotmail.com> Tested-by: <syzbot+6f5ecd144854c0d8580b@syzkaller.appspotmail.com> Reviewed-by: Dan Carpenter <dan.carpenter@oracle.com> Signed-off-by: Wang Cheng <wanngchenng@gmail.com> Link: https://lore.kernel.org/r/14c3886173dfa4597f0704547c414cfdbcd11d16.1652618244.git.wanngchenng@gmail.com Signed-off-by: Greg Kroah-Hartman <gregkh@linuxfoundation.org> |
||
|---|---|---|
| .. | ||
| basic_types.h | ||
| drv_types.h | ||
| ethernet.h | ||
| hal_init.c | ||
| ieee80211.c | ||
| ieee80211.h | ||
| Kconfig | ||
| Makefile | ||
| mlme_linux.c | ||
| mlme_osdep.h | ||
| mp_custom_oid.h | ||
| os_intfs.c | ||
| osdep_intf.h | ||
| osdep_service.h | ||
| recv_linux.c | ||
| recv_osdep.h | ||
| rtl871x_cmd.c | ||
| rtl871x_cmd.h | ||
| rtl871x_debug.h | ||
| rtl871x_eeprom.c | ||
| rtl871x_eeprom.h | ||
| rtl871x_event.h | ||
| rtl871x_ht.h | ||
| rtl871x_io.c | ||
| rtl871x_io.h | ||
| rtl871x_ioctl_linux.c | ||
| rtl871x_ioctl_rtl.c | ||
| rtl871x_ioctl_rtl.h | ||
| rtl871x_ioctl_set.c | ||
| rtl871x_ioctl_set.h | ||
| rtl871x_ioctl.h | ||
| rtl871x_led.h | ||
| rtl871x_mlme.c | ||
| rtl871x_mlme.h | ||
| rtl871x_mp_ioctl.c | ||
| rtl871x_mp_ioctl.h | ||
| rtl871x_mp_phy_regdef.h | ||
| rtl871x_mp.c | ||
| rtl871x_mp.h | ||
| rtl871x_pwrctrl.c | ||
| rtl871x_pwrctrl.h | ||
| rtl871x_recv.c | ||
| rtl871x_recv.h | ||
| rtl871x_rf.h | ||
| rtl871x_security.c | ||
| rtl871x_security.h | ||
| rtl871x_sta_mgt.c | ||
| rtl871x_wlan_sme.h | ||
| rtl871x_xmit.c | ||
| rtl871x_xmit.h | ||
| rtl8712_bitdef.h | ||
| rtl8712_cmd.c | ||
| rtl8712_cmd.h | ||
| rtl8712_cmdctrl_bitdef.h | ||
| rtl8712_cmdctrl_regdef.h | ||
| rtl8712_debugctrl_bitdef.h | ||
| rtl8712_debugctrl_regdef.h | ||
| rtl8712_edcasetting_bitdef.h | ||
| rtl8712_edcasetting_regdef.h | ||
| rtl8712_efuse.c | ||
| rtl8712_efuse.h | ||
| rtl8712_event.h | ||
| rtl8712_fifoctrl_bitdef.h | ||
| rtl8712_fifoctrl_regdef.h | ||
| rtl8712_gp_bitdef.h | ||
| rtl8712_gp_regdef.h | ||
| rtl8712_hal.h | ||
| rtl8712_interrupt_bitdef.h | ||
| rtl8712_io.c | ||
| rtl8712_led.c | ||
| rtl8712_macsetting_bitdef.h | ||
| rtl8712_macsetting_regdef.h | ||
| rtl8712_powersave_bitdef.h | ||
| rtl8712_powersave_regdef.h | ||
| rtl8712_ratectrl_bitdef.h | ||
| rtl8712_ratectrl_regdef.h | ||
| rtl8712_recv.c | ||
| rtl8712_recv.h | ||
| rtl8712_regdef.h | ||
| rtl8712_security_bitdef.h | ||
| rtl8712_spec.h | ||
| rtl8712_syscfg_bitdef.h | ||
| rtl8712_syscfg_regdef.h | ||
| rtl8712_timectrl_bitdef.h | ||
| rtl8712_timectrl_regdef.h | ||
| rtl8712_wmac_bitdef.h | ||
| rtl8712_wmac_regdef.h | ||
| rtl8712_xmit.c | ||
| rtl8712_xmit.h | ||
| sta_info.h | ||
| TODO | ||
| usb_halinit.c | ||
| usb_intf.c | ||
| usb_ops_linux.c | ||
| usb_ops.c | ||
| usb_ops.h | ||
| usb_osintf.h | ||
| wifi.h | ||
| wlan_bssdef.h | ||
| xmit_linux.c | ||
| xmit_osdep.h | ||